12149 matches found
gitjacker
gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...
aiodnsbrute
Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...
fbchecker
ABANDONED Facebook block multiple access with their API FACEBOOK MASS ACCOUNT CHECKER Facebook Mass Account Checker Without Locked Account Simple Installation : root@kitploit: apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.php Usage root@kitploit:...
CVE-2017-1000117
Test repository to check Git's vulnerability CVE-2017-1000117 How it works? Clone this repository recursively. The sentence 「うんこもりもり」which means like "Lots of shit." will be shown on your terminal. root@kitploit: $ git clone --recursive https://github.com/greymd/CVE-2017-1000117.git Cloning into...
gitGRAB
gitGRAB Install Requests root@kitploit: pip install requests Execute the program root@kitploit: python3 gitgrab.py...
tmpmail
A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...
CVE-2024-32002-Reverse-Shell
CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...
RepoReaper
RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...
gitleaks
Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaks 功能已完整。我不会在 Gitleaks 中合并新功能。未来版本仅包含安全补丁。我的工作重点已转向 Betterleaks license: https://raw.githubusercontent.com/gitleaks/gitleaks/master/LICENSE badge-license: https://img.shields.io/github/license/gitleaks/gitleaks.svg...
DumpsterDiver
DumpsterDiver by @Rzepsky DumpsterDiver is a tool, which can analyze big volumes of data in search of hardcoded secrets like keys e.g. AWS Access Key, Azure Share Key or SSH keys or passwords. Additionally, it allows creating a simple search rules with basic conditions e.g. report only csv files...
bst
Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...
git-all-secrets
git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...
git-all-secrets
git-all-secrets 关于 git-all-secrets 是一款能够执行以下操作的工具： 克隆某个组织的多个公共/私有 GitHub 仓库并进行扫描， 克隆组织中某个用户的多个公共/私有 GitHub 仓库并进行扫描， 克隆某个组织的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/秘密 Gist 并进行扫描， 克隆组织中某个团队的所有仓库并进行扫描， 以上全部功能可以一起完成！没错！只需提供组织名称，即可获取该组织的所有秘密。如果你还想获取组织中某个团队的秘密，只需在组织名称旁注明团队名称。 同时支持克隆和扫描 GitHu...
CVE-2020-14144-GiTea-git-hooks-rce
CVE-2020-14144 - Ejecución remota de código autenticada en GiTea Un script para explotar CVE-2020-14144 - Ejecución remota de código autenticada en GiTea mediante ganchos de git Características Generación automática de payload de shell inversa desde IP y PUERTO Subir script de shell personalizado...
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
git_rce
CVE-2024-32002：利用 git clone 实现 Git 远程代码执行 该仓库包含 CVE-2024-32002 的 PoC，该漏洞允许在 git clone 操作期间实现远程代码执行。通过以特定方式构造带有子模块的仓库，攻击者可以利用不区分大小写的文件系统上的符号链接处理，将文件写入 .git/ 目录，从而执行恶意钩子。 注意： 此 PoC 仅适用于 Windows 或 Mac 系统。 博客文章 关于此漏洞逆向分析的详细说明，请参见博客文章：https://amalmurali.me/posts/git-rce。 工作原理 1...
git_rce
CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...
vault-conductor
🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features...
CVE-2026-32604
CVE-2026-32604 - RCE mediante artefacto GitRepo de Spinnaker CVE-2026-32604 - Ejecución remota de código en Spinnaker a través del tipo de artefacto git/repo. Esta es una vulnerabilidad de inyección de comandos / ejecución remota de código en el manejo de artefactos GitRepo de Spinnaker. La...